Static task
static1
Behavioral task
behavioral1
Sample
6cdcfd97a0955208e5dd00f328610aee1c2c7d3cc3353012de580cdb04d93a03.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6cdcfd97a0955208e5dd00f328610aee1c2c7d3cc3353012de580cdb04d93a03.exe
Resource
win10v2004-20220812-en
General
-
Target
6cdcfd97a0955208e5dd00f328610aee1c2c7d3cc3353012de580cdb04d93a03
-
Size
108KB
-
MD5
6e65a62804f1bf9ab7ee3a74412639d0
-
SHA1
d8286779b0eff4bf88525a0d74fe2e46a5a739e8
-
SHA256
6cdcfd97a0955208e5dd00f328610aee1c2c7d3cc3353012de580cdb04d93a03
-
SHA512
944f52e7ecd92f36139b34a7269b9d7e4b6412305127dcbe1e508fc95584a7772de9b5054ae6b0d7016f6823d933ba940ee6068368e4bfe2ceed7c3f76628b12
-
SSDEEP
1536:ZhhqTEincoMNbZSpSYi6gLeXxliJKwQJm7tpp7PYBSGV2L5E2fMHxKgwC:LKEincoYSpSY1MeBlMBppsBBIV1Uw
Malware Config
Signatures
Files
-
6cdcfd97a0955208e5dd00f328610aee1c2c7d3cc3353012de580cdb04d93a03.exe windows x86
e99c6ae5e4575b27904f21d312afa4d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
SetFileAttributesW
GetEnvironmentVariableA
GetStdHandle
SuspendThread
ExitProcess
DeleteFileA
GetModuleHandleA
GetFileAttributesA
VirtualAlloc
ReadFile
CreateFileA
IsBadReadPtr
SetLastError
GetCurrentDirectoryA
EnterCriticalSection
FindAtomW
GetFileSize
SetEndOfFile
GetVersion
CloseHandle
HeapSize
SetLastError
GetCommandLineA
DeleteAtom
cryptui
WizardFree
CryptUIWizExport
CryptUIDlgFreeCAContext
LocalEnrollNoDS
CryptUIWizImport
DllUnregisterServer
CryptUIDlgViewContext
CryptUIStartCertMgr
CryptUIWizBuildCTL
CryptUIWizDigitalSign
LocalEnroll
DllRegisterServer
WizardFree
uniplat
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ